Redirector and flashtimeline error

[tmurray3]

I have a simple results table containing hostnames, and when I click a row in the table, I want to popup a window and do a search based on the hostname. First issue, is the window does not popup, it displays in the current window. Secondly, a red error at the top of the search screen states "Search operation 'index' is unknown. You might not have permission to run this operation."

The search query is defined as: index=iam_af host=croshrspax01

The results are displayed correctly, however not sure why there is an error message.

I am using IE6 and Splunk 4.2.1

Here is the code:

    <view autoCancelInterval="90" isVisible="true"
onunloadCancelJobs="true" template="dashboard.html"
isSticky="False">
  <label>AF Details</label>
  <module name="AccountBar" layoutPanel="appHeader" />
  <module name="AppBar" layoutPanel="appHeader" />
  <module name="SideviewUtils" layoutPanel="appHeader" />
  <module name="Message" layoutPanel="messaging">
    <param name="filter">*</param>
    <param name="maxSize">2</param>
    <param name="clearOnJobDispatch">False</param>
  </module>
  <module name="HTML" layoutPanel="viewHeader">
    <param name="html">
      <![CDATA[
    <h1>AF Details    ]]>
</param>
  </module>

<module name="HiddenSavedSearch" layoutPanel="panel_row1_col1" autoRun="True">
    <param name="savedSearch">AF-Search-CroydonHosts </param>
        <module name="HTML" >
            <param name="html"><![CDATA[
            <h1>DataCenter Croydon</h1>
            ]]>

        </param>
    </module>

      <module name="JobProgressIndicator"></module>

    <module name="Pager">
                 <param name="entityName">results</param>

            <module name="SimpleResultsTable">
                    <param name="entityName">results</param>
                     <param name="drilldown">row</param>

                   <module name="Redirector">
                         <param name="url">flashtimeline</param>
                         <param name="arg.q">index=iam_af host=$click.value$</param>
                         <param name="arg.earliest">rt-5m</param>
                         <param name="arg.latest">rt</param>
                         <param name="arg.popup">true</param>

                   </module>



                  </module>
        <module name="Pager">
          <param name="entityName">results</param>
        </module>
</module>
</module>


</view>

[sideview · Accepted solution]

The first problem is that the flashtimeline view requires that the initial 'search' command be specified before your searchterms. Change your arg.q value to have a prepended 'search'.

And the second problem is simply that you want <param name="popup"> not <param name="arg.popup">. Because of how Redirector works, the former is it's 'popup' param, determining whether or not the link should load in a popup window. And the latter is simply a directive that the Redirector should put &popup=true into the URL that the user is sent to.

Note also that the legal values for the 'popup' param are True and False and they are case sensitive.